Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a3632303a3a2f34332d3433203d3e20323634333439.roa
File:                     323830343a316432303a3632303a3a2f34332d3433203d3e20323634333439.roa (raw, json)
Hash identifier:          o/HGaH+1EC4bAB2/+k+X9OpFa7/6yJMfKKYpQutxQYQ=
Subject key identifier:   75:26:17:3D:E8:47:51:84:A1:04:08:95:DF:60:0F:F9:2C:A5:71:AB
Certificate issuer:       /CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
Certificate serial:       685063EB8C041CE195E6B5AE16F5CCE0C16E03A2
Authority key identifier: 6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a3632303a3a2f34332d3433203d3e20323634333439.roa
Signing time:             Tue 07 Nov 2023 15:19:09 +0000
ROA not before:           Tue 07 Nov 2023 15:14:09 +0000
ROA not after:            Tue 05 Nov 2024 15:19:09 +0000
asID:                     264349
IP address blocks:        2804:1d20:620::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:50:63:eb:8c:04:1c:e1:95:e6:b5:ae:16:f5:cc:e0:c1:6e:03:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B6DB3E809FEF682676786BBDD422E949AA068
        Validity
            Not Before: Nov  7 15:14:09 2023 GMT
            Not After : Nov  5 15:19:09 2024 GMT
        Subject: CN=7526173DE8475184A1040895DF600FF92CA571AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:27:5c:4f:8f:52:c6:a3:3c:b1:c0:6f:24:
                    ee:bb:c8:bf:7b:c1:97:f5:af:5f:d4:3e:7a:fc:dd:
                    04:26:da:5c:79:9a:cb:d7:70:45:38:7d:2e:11:67:
                    27:af:f6:b2:09:bc:ac:6d:b6:5f:d5:e4:7a:49:b8:
                    76:a3:95:0e:c7:57:2d:f5:ad:79:0a:65:01:17:ba:
                    2b:3e:ee:d8:91:50:bb:0c:8b:29:1f:b5:49:cc:f2:
                    57:d5:11:9c:60:8b:5b:50:ff:bf:3e:d5:41:d6:26:
                    d6:6c:ab:76:b7:5c:5c:d2:0a:be:17:d8:a4:20:13:
                    0c:46:b7:82:22:19:3d:ba:8c:56:ff:68:cb:bf:9b:
                    05:c9:b2:e2:f5:38:39:b3:65:1b:01:21:2b:63:3d:
                    68:38:33:dc:b4:de:b1:72:7c:e5:55:fe:10:0b:c3:
                    a9:9f:b6:4f:14:2a:07:e6:41:e7:05:19:dd:71:56:
                    9c:ec:df:4f:23:88:15:c5:d3:bd:57:42:6a:cf:73:
                    37:61:f4:4d:1b:72:8b:6d:ee:ad:fd:05:a8:6d:fa:
                    a2:e9:cb:9d:70:3d:fa:e8:52:49:f8:42:4d:45:9e:
                    08:89:0a:05:b3:24:a6:b9:42:b1:db:48:c3:71:1f:
                    8e:24:47:b7:5f:c9:cf:f7:1d:b2:3e:c1:67:d5:85:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:17:3D:E8:47:51:84:A1:04:08:95:DF:60:0F:F9:2C:A5:71:AB
            X509v3 Authority Key Identifier:
                keyid:6D:4B:6D:B3:E8:09:FE:F6:82:67:67:86:BB:DD:42:2E:94:9A:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D4B6DB3E809FEF682676786BBDD422E949AA068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYrj8YApFigMah3jnqvwRwaQ3dmmsHyGzGW2y1MYyC3r/0/323830343a316432303a3632303a3a2f34332d3433203d3e20323634333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d20:620::/43

    Signature Algorithm: sha256WithRSAEncryption
         83:17:a7:0e:35:18:a8:ab:59:2d:29:31:b3:da:09:e1:15:b5:
         c1:35:f5:80:a5:d9:f3:a2:87:9d:67:50:08:e7:6a:28:fe:69:
         16:a4:af:54:f2:c2:57:88:0e:de:8c:b2:1b:46:67:ff:6a:9b:
         c9:f8:eb:1b:7e:46:57:90:7a:10:93:8b:4c:3c:4c:d1:07:e8:
         1b:51:51:33:ed:d3:d5:60:a6:c9:62:8b:de:0f:bd:cd:b1:a9:
         1c:1d:7a:ca:c4:1e:47:d1:08:b7:43:10:84:71:0b:be:e3:2a:
         98:db:c8:ca:26:a3:38:4e:05:0f:f5:8d:22:12:b4:bb:2d:68:
         84:24:22:00:6f:3c:75:5e:39:d3:9e:bf:64:17:9c:57:58:13:
         90:a3:fa:b7:4d:76:94:c7:83:d2:72:97:7d:59:f6:d4:2d:c8:
         45:ac:fc:45:33:36:6d:00:06:6f:c3:ac:3b:20:c8:d0:0e:ef:
         e4:8c:ea:60:22:41:86:79:87:57:9f:18:4a:ac:da:c3:06:f6:
         66:3f:b3:e7:77:29:35:72:28:5f:ae:7d:f0:3f:74:30:76:cc:
         53:57:21:25:ae:0c:e5:27:64:73:64:ef:2f:c0:43:7a:5e:24:
         95:8d:83:45:d3:01:6e:23:d4:57:c6:9b:b1:60:da:be:c0:48:
         f3:1e:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:33:58 2025 by rpki-client